Privacy policy

May 19, 2025

1. JOINT DATA CONTROLLERS

H2med is a consortium of project partners composed of the entities listed below. Based on a formal agreement between them, these entities act as joint data controllers for the processing of user data related to the website operated by the partners.

The contact details of each data controller are as follows:

2. CATEGORIES AND TYPES OF PERSONAL DATA

The joint controllers may process the following types of personal data, classified under a single category:

• Identification and professional contact data: First and last name, email address, job title, and affiliated organization.

3. PURPOSES OF DATA PROCESSING

The personal data you provide to H2med partners will be processed for the following purposes:

• a) To manage user registration on the website.
• b) To respond to any request, inquiry, suggestion, or complaint submitted through the contact section of the Site. When the user contacts H2med partners using the contact means provided for that purpose and provides us with your data, we will process it to manage and respond to the request or inquiry you have submitted and for which you have contacted us in connection with that request or inquiry.
• c) To send satisfaction surveys to assess H2med’s activities. We may send surveys to evaluate our events, conferences, publications, and the activities we undertake.
• d) Analytics. To carry out internal analysis. Exclusively for internal purposes, and so that we may understand internally how to improve our operations or make decisions, we may process user data in aggregated (i.e., non-identifying) or, where applicable, pseudonymized form to conduct sociodemographic analyses, perform internal evaluations, and prepare studies, reports, and statistics that enable us to adapt the activity and commercial information of the H2med project.
• e) To send electronic communications regarding H2med project activities. Data will be processed to send electronic communications about activities, initiatives, conferences, events, and any other action organized, promoted, or participated in by the H2med project. Each communication will include a mechanism allowing the user to express their objection to receiving such communications.
• f) To manage participation in conferences and events organized. In the case of conferences and events organized by the H2med project, we may process users’ personal data to carry out any necessary action or management related to the event. We may collaborate with third parties to whom we must grant access to the data or, where appropriate, communicate the data.
• g) Social media. We may process your personal data when you use our social media profiles, in accordance with the provisions of this privacy policy.

4. LEGAL BASIS

The legal basis permitting the processing of personal data provided by the user through the website, in accordance with the identified purposes, is as follows:

5. DATA RETENTION

The data provided will be retained for as long as necessary to fulfil the purpose for which it was collected, and to ensure compliance with the legal obligations applicable to the H2med project.

6. DATA RECIPIENTS

H2med project partners will disclose personal data when such disclosure is legally permitted or necessary to comply with a legal obligation, including disclosure to competent authorities, judges, and courts.

Personal data may be made available to service providers, collaborators, or processors with whom appropriate agreements have been concluded and who require access to the data for the performance of H2med project activities. These collaborators, processors, or service providers are only authorised to process personal data for the purposes of providing the relevant services. They are not permitted to use the data for their own purposes or to transfer it to third parties, unless they act as independent data controllers.

Where necessary, the following categories of third parties may have access to user data for the purposes stated in this policy:

• • Auditors, consultants, and other advisory and audit firms;
• • Companies providing marketing and advertising services;
• • Companies managing the H2med website and social media profiles;
• • Other companies providing services to the H2med project that require access to data for the delivery of specific services;
• • Entities such as, but not limited to, energy companies supporting the H2med project, institutions, universities, public or private organisations, associations, and foundations with whom H2med project partners collaborate for the organisation of events, conferences, and other activities. In these cases, any access to or disclosure of data will be carried out with appropriate legal safeguards and always within the framework of a specific activity organised by, or involving, the H2med project partners.

Likewise, the user’s personal data may be processed and disclosed as part of preparatory actions and review steps, as well as prior or subsequent acts related to business operations of any kind, including, but not limited to, mergers, demergers, total or partial transfer of assets, contributions or transfers of business units or branches of activity, or any other restructuring operations of a corporate nature as provided by commercial regulations, including within the context of the above-mentioned business transactions.

7. INTERNATIONAL DATA TRANSFERS

The user’s personal data is processed within the European Economic Area (EEA). Should the data be processed in countries outside the EEA that do not offer a level of protection equivalent to that of the EEA, H2med project partners will adopt the necessary legal safeguards, such as the execution of the applicable Standard Contractual Clauses.

8. SECURITY OF YOUR DATA PROCESSING

Appropriate technical and organisational security measures have been implemented to ensure the security of personal data and to prevent its alteration, loss, or unauthorised processing and/or access, taking into account the state of the art, the nature of the data stored, and the risks to which the data is exposed, whether from human action or the physical or natural environment.

All processing related to the website services is carried out exclusively by personnel designated to process the data or by personnel in charge of maintenance operations.

9. DATA PROVIDED

By providing personal data through the website, the user guarantees that all personal data provided is current, truthful, and accurate.

Where the user provides H2med project partners with the personal data of third parties with whom they have a relationship, the user guarantees that they are legally authorised to do so and that they have provided the necessary information to those third parties and obtained their consent to the disclosure of their data. The user shall be held liable in the event of non-compliance. Notwithstanding the foregoing, H2med project partners will endeavour to act appropriately with regard to the processing of such third-party data.

10. RIGHTS

In accordance with the provisions of applicable personal data protection regulations in force at any given time, and in compliance with the relevant legislation, the user may, at any time, revoke their consent for the processing of their personal data and exercise their rights of access, rectification, erasure, objection, restriction of processing, and data portability.
To exercise these rights, users may contact the data controllers by email using the contact addresses provided in the table above. The user also has the right to lodge a complaint with the relevant Data Protection Authority.

11. CHANGES TO THE PRIVACY POLICY

This privacy policy may be updated at any time. Any future modifications to our privacy policy will be made available and published on this page and, where applicable, notified to you by email.